One role of web browsers is to act on behalf of their users. They can protect users from things websites want but that users don't. 1/7
1
2
9
Some protections partly take back a feature that didn't turn out as intended. They make an existing feature not work, in some cases. 2/7
1
But when browsers have enough market share, sites react to how they behave. So browser makers need to think about how they will react. 3/7
1
If you design something based on a heuristic, you have to consider how developers will behave once they know the heuristic. 4/7

Sep 26, 2017 · 5:00 PM UTC

1
If you design a heuristic that can be defeated, what you've done is build a complicated and hard-to-understand API. 5/7
1
3
5
The heuristic just becomes part of the API that developers need to understand in order to work around. 6/7
1
1
Heuristics make bad API. 7/7
2
1
1
4